Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9a177b81-3741-4833-baba-1629081ec54f.cer
File:                     9a177b81-3741-4833-baba-1629081ec54f.cer (raw, json)
Hash identifier:          7mb1VJC6ztVR+yqBoj2W5A1UWPLJoo0k5qJJHBhUJyM=
Subject key identifier:   B5:3E:B4:D4:0D:C1:0C:C7:5B:3C:6A:DB:E6:16:69:1B:9E:41:F0:65
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F43285841E4835140BECCBACDBF521920
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9a177b81-3741-4833-baba-1629081ec54f/9a177b81-3741-4833-baba-1629081ec54f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9a177b81-3741-4833-baba-1629081ec54f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Tue 15 Jul 2025 19:06:39 +0000
Subordinate resources:    AS: 11187
                          IP: 208.74.80.0/21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:51:40:be:cc:ba:cd:bf:52:19:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Jul 15 19:06:39 2025 GMT
        Subject: CN=9a177b81-3741-4833-baba-1629081ec54f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:87:95:f8:64:ff:d4:ea:76:31:09:8f:5d:b8:
                    db:d6:d2:ad:82:d2:70:db:f0:0c:50:4d:ee:33:d9:
                    1c:a0:e9:06:b9:0d:3f:b2:1e:99:bb:df:73:b4:ff:
                    9e:30:3f:d0:06:2d:79:72:03:9b:f4:f8:de:4d:f7:
                    7b:8d:f6:f4:0a:17:92:c0:f4:fb:96:1b:f3:99:da:
                    e2:2c:dd:3b:ba:5f:29:03:60:e9:43:88:8c:2f:af:
                    ed:3e:2b:84:94:07:33:e1:e5:cb:0b:ca:b7:29:b7:
                    24:ed:4a:f0:29:0f:7d:20:5e:d8:08:42:c9:39:7e:
                    37:d5:9b:df:7f:e1:62:87:01:e0:98:5f:f9:fa:42:
                    d2:bd:3d:83:2d:a6:5e:90:03:ee:d6:24:c6:3f:d5:
                    33:58:3e:1f:55:08:3d:c6:d9:fe:12:ad:2b:1f:29:
                    93:29:ec:df:59:3f:82:37:59:c9:bf:61:14:e3:66:
                    7a:2e:0c:e6:54:ae:ff:ed:ed:68:65:f2:0b:a3:95:
                    61:7c:7d:df:1c:34:d2:38:b3:41:ed:5f:ba:23:15:
                    69:c6:c7:75:59:8c:c2:dd:52:01:3e:38:b4:31:13:
                    fc:93:30:84:0c:e7:5b:e2:2f:e9:0d:0a:20:7c:e9:
                    af:f8:a5:05:99:d7:84:2f:2c:88:2f:27:9d:4f:bb:
                    44:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:3E:B4:D4:0D:C1:0C:C7:5B:3C:6A:DB:E6:16:69:1B:9E:41:F0:65
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9a177b81-3741-4833-baba-1629081ec54f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9a177b81-3741-4833-baba-1629081ec54f/9a177b81-3741-4833-baba-1629081ec54f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.74.80.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11187

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:c6:23:85:ef:7c:3b:e8:10:fc:c9:1b:a9:2c:ae:19:93:e4:
         a1:8c:81:54:08:64:00:da:b1:8e:94:9f:fe:ef:c7:4c:0a:3e:
         eb:06:ac:5a:0b:e9:a4:a9:9b:e4:b1:d8:0a:fb:98:fc:66:06:
         c3:5c:f6:ed:4c:49:65:65:9d:e6:b4:e2:fe:62:b7:82:77:0c:
         c3:1b:fe:bb:b9:91:51:f0:10:f4:42:c4:7b:ff:52:4b:74:f9:
         1e:41:9d:f2:f3:9a:49:b2:ae:e0:57:de:0e:81:bf:7d:d5:19:
         18:90:84:78:af:0a:bd:1c:d5:44:35:c1:71:93:b9:66:78:86:
         22:95:69:b4:da:c5:b3:3b:ff:8a:d6:ea:78:76:a8:75:cc:25:
         06:b2:a1:c0:55:e9:59:8e:4b:6e:bf:4f:0f:ae:48:07:29:4e:
         56:53:b0:8f:0b:6f:aa:64:ce:73:b5:eb:b6:00:79:cc:e5:ec:
         6a:28:e8:56:58:4d:ff:88:00:1c:f8:c9:a3:3a:3e:cf:3c:f7:
         d9:41:0d:7d:41:c6:80:9c:78:7f:73:1d:bd:31:75:62:28:17:
         b2:8b:47:69:dd:dc:9c:d5:fa:60:6d:20:70:ed:5d:27:56:38:
         fb:0b:db:18:66:8d:52:de:8e:c8:69:9d:06:12:49:44:a1:eb:
         39:37:07:9d
-----BEGIN CERTIFICATE-----
MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEHkg1FAvsy6zb9SGSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy
ZTI5MB4XDTIzMDUxNTE5MDYzOVoXDTI1MDcxNTE5MDYzOVowLzEtMCsGA1UEAxMk
OWExNzdiODEtMzc0MS00ODMzLWJhYmEtMTYyOTA4MWVjNTRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4eV+GT/1Op2MQmPXbjb1tKtgtJw2/AMUE3u
M9kcoOkGuQ0/sh6Zu99ztP+eMD/QBi15cgOb9PjeTfd7jfb0CheSwPT7lhvzmdri
LN07ul8pA2DpQ4iML6/tPiuElAcz4eXLC8q3Kbck7UrwKQ99IF7YCELJOX431Zvf
f+FihwHgmF/5+kLSvT2DLaZekAPu1iTGP9UzWD4fVQg9xtn+Eq0rHymTKezfWT+C
N1nJv2EU42Z6LgzmVK7/7e1oZfILo5VhfH3fHDTSOLNB7V+6IxVpxsd1WYzC3VIB
Pji0MRP8kzCEDOdb4i/pDQogfOmv+KUFmdeELyyILyedT7tEmQIDAQABo4IEGjCC
BBYwHQYDVR0OBBYEFLU+tNQNwQzHWzxq2+YWaRueQfBlMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85
YTE3N2I4MS0zNzQxLTQ4MzMtYmFiYS0xNjI5MDgxZWM1NGYvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt
YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzlhMTc3YjgxLTM3NDEtNDgzMy1i
YWJhLTE2MjkwODFlYzU0Zi85YTE3N2I4MS0zNzQxLTQ4MzMtYmFiYS0xNjI5MDgx
ZWM1NGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5
ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz
MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O
1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2
MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAPQSlAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC
K7MwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAIcYjhe98O+gQ/MkbqSyuGZPkoYyBVAhkANqxjpSf/u/HTAo+
6wasWgvppKmb5LHYCvuY/GYGw1z27UxJZWWd5rTi/mK3gncMwxv+u7mRUfAQ9ELE
e/9SS3T5HkGd8vOaSbKu4FfeDoG/fdUZGJCEeK8KvRzVRDXBcZO5ZniGIpVptNrF
szv/itbqeHaodcwlBrKhwFXpWY5Lbr9PD65IBylOVlOwjwtvqmTOc7XrtgB5zOXs
aijoVlhN/4gAHPjJozo+zzz32UENfUHGgJx4f3MdvTF1YigXsotHad3cnNX6YG0g
cO1dJ1Y4+wvbGGaNUt6OyGmdBhJJRKHrOTcHnQ==
-----END CERTIFICATE-----